Generative AI is making phishing attacks more convincing and personal, allowing attackers to create fake login pages that closely mimic real company websites and trick employees into handing over their login credentials. This means organizations are facing a significantly higher risk of credential theft and data breaches.
A recent security breach at Keystone has exposed a shocking risk: thousands of counterfeit hardware wallets could be in circulation, putting users' sensitive information at risk. Keystone is taking swift action, destroying 18,835 unsold wallets compromised by the breach.
Microsoft just dropped an emergency Windows update to protect against a zero-day attack on on-premise SharePoint, and it's packed with crucial certificate updates to keep your system safe. This surprise fix is a must-have to prevent potential security breaches.
Microsoft Teams' external chat feature has been exploited in over 400 incidents, with attackers executing payloads in as little as 15 minutes by creating convincing identities using newly created or acquired Microsoft 365 tenants. They took advantage of the fact that external access is turned on by default, allowing them to easily find and interact with unsuspecting employees.
A massive data breach has hit the German far-right party Alternative for Germany (AfD), exposing a whopping 345,000 unique email addresses after a hack targeted its email hosting provider. The breach, which actually occurred in September, was only recently confirmed by the popular breach notification service Have I Been Pwned.
A cyber-attack on the University of Copenhagen has compromised the personal data of 525,000 individuals, including sensitive info like names, identity numbers, phone numbers, and email addresses. The breach, detected on October 20, has also exposed physical access PIN codes for around 20,000 staff and students.
Apple warns that a highly sophisticated attack has likely exploited a critical CoreGraphics flaw, tracked as CVE-2026-86950, targeting specific individuals on older iOS versions. This zero-day vulnerability allows attackers to execute arbitrary code by processing maliciously crafted files.
ENGIE recently discovered a data breach affecting French customers, after unusual activity was detected within a marketing tool used by the company's partners to promote energy offers. The breach was quickly contained, with attackers accessing customer data but not ENGIE's internal systems.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
In a major cyber takedown, Australia's Australian Signals Directorate severed the connection between a notorious Amadey malware controller and 180,000 infected computers worldwide, including some in Australia, effectively cutting off the attackers' access. This targeted disruption was a significant blow to the Amadey malware network.
The Cybersecurity and Infrastructure Security Agency has sounded the alarm on two critical PHP2Shell vulnerabilities, warning that they're being actively exploited by malicious actors - and giving federal agencies a tight deadline to patch up their systems. All organizations, not just government agencies, should take heed of this urgent alert and secure their PHP2Shell systems ASAP.
Hackers exploited weaknesses in Easy4IP, a peer-to-peer platform used for Dahua IP cameras, and predictable serial numbers to gain unauthorized access to over 14,530 cameras in Ukraine between June and July 2026. This alarming vulnerability allowed attackers to use brute-force credential attacks and known authentication bypass flaws to compromise the devices.
The US Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that two recently patched PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, are being actively exploited by hackers, allowing for unauthenticated remote code execution. These critical flaws, rated 9.2 on the CVSS scale, pose a significant threat to online security.
The US has sent a strong message to scammers worldwide: there's no hiding from justice, as seen in the extradition of Zheng Zhao, a Chinese national accused of playing a key role in a $37M crypto scam. Zhao was extradited from the Netherlands and charged with conspiracy to commit money laundering, facing up to 20 years in prison.
A recent cloud service breach at GMO Internet has exposed the dark side of FX trading, revealing the devastating consequences of malicious programs infiltrating customer server environments. The hack has left trading accounts and company operations reeling, sparking a heated debate about national cyberdefense.
A recent npm worm payload has been found to have compromised 42 GitHub repositories belonging to 11 owners, with account hijacks dating back to July, revealing a more extensive threat than initially thought. The stealthy attack was cleverly disguised, with its operator taking steps to make it appear contained.
A cyber attack on the University of Copenhagen has put the personal data of 525,000 individuals at risk, with hackers gaining access to a test environment containing sensitive information. The breach also exposed PIN codes for an additional 20,000 staff and students.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
In a major breakthrough, South Korean police have arrested seven suspects, including the leader, behind a massive hacking operation that exploited generative AI to steal personal info from over 90 organizations. The innovative use of an in-house AI tool helped crack the case, marking a first for Korea in terms of AI-powered hacking crimes.
A single misstep on May 27 - committing a master key to a public repository - ultimately led to a supply chain compromise on October 10, allowing a threat actor to extract a sensitive GitHub CLI OAuth token. The lapse occurred when the exposed key wasn't revoked quickly enough, leaving the door open to malicious access.
A massive JavaScript malware campaign has compromised 953 online stores, primarily running Magento, since July 2025, according to a recent report by Sansec. This sneaky threat has been hiding in plain sight for over a year, using five distinct loader domains to evade detection.
DreamHost is taking a proactive approach to security by mandating password resets for email and FTP/SFTP users following a disruption to its File Manager interface. This move aims to safeguard user accounts and prevent potential security breaches.
Beware of Microsoft Teams scams where attackers pose as IT support to deploy malware - they've even been using the same tactics, including throwaway accounts and remote-access tools, to trick hundreds of victims. These scammers are getting sneaky, using familiar names and themes to gain your trust.
Patching can shut the door, but it won't reveal who might already be inside - and with PHP2Shell vulnerabilities now being exploited in live attacks, defenders must act fast to assume the worst. The clock is ticking: from scanning to remote code execution can happen in mere days.
In a shocking crackdown, South Korean authorities have arrested seven suspects linked to an AI-powered cybercrime ring that allegedly stole over 8 million records from 90 organizations, including businesses, hospitals, and private academies. The stolen data was obtained through a coordinated hacking operation that began last September.
Millions of attacks have been launched in the wake of two critical PHP vulnerabilities, known as PHP2Shell, being made public - and experts are urging swift patching to prevent remote code execution. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, have already sparked a surge in scanning activity, with several websites taking precautionary downtime.